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Description 

IMPROVED PROTECTION FOR POSITION DEPENDENT SERVICES. 

The invention relates to methods and devices for interrogating the 
agreement of the mobile terminal user to the transfer of their 
5 position data to a requesting party. 

Privacy functions of the protection of the private sphere or other 
mobile terminal user by checking functions relating to the 
forwarding of the position of the mobile radio terminal 

The use of position data of aim a bale at Terminal user of a 
10 cellular mobile radio network for location dependants services such 
as for example information about the nearest gas station etc. 
(Location Services = LCS) is known from 3GPP-TS 23.271. However 
under some circumstances the user would like avoid any third party 
being able to interrogate their current position from the mobile 
15 radio network. Therefore the mobile terminal user needs a function 
which defines for any potential party requesting their position from 
the mobile radio network, whether the notification of this position 
data of the mobile terminal user to this interrogating party is 
generally allowed, is basically forbidden or can be allowed after 
20 verification with the mobile terminal user. This function is 
referred to as LCS User Privacy (also LCS user private sphere 
function) . 

In accordance with 3GPP Release 4 Standards TS 23.271 and TS 29.002 
the LCS-User Privacy is stored for each subscriber in a Home 
25 Location Register (HLR) in a number of privacy classes and is 

downloaded by the HLR to the MSC or SGSN visited by the user, in 
which case an LCS user privacy function checks whether in the case 
of an interrogation about the position of the mobile radio terminal 
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(Mobile Terminating Location Request MTLR) position data is to be 
transferred to the interrogating party from a GMLC . LCS privacy 
classes are provided for value added services, these being the call 
session-related class and the call session-unrelated class. In 
5 accordance with 3GPP Release 4 the user can specify for each of 
these two classes up to 240 LCS client IDs and for each client ID 
(identities potential parties requesting the position of the user) 
can define comprehensive specifications as to how the MSC/SGSN 
visited by the user is to perform the LCS user privacy check. For 

10 example it is possible to define that the user receives only one LCS 
notification (that is a notification that someone is requesting 
their position) or that the user receives an LCS verification (that 
is a verification to him before transfer of his position to the 
requesting party) and other options. If the LCS client ID is not 

15 stored in a list specified by the user, default behavior is executed 
in accordance with the user's specifications. 

The LCS user privacy defined by 3GPP (3GPP Standard TS 23.271 and TS 
29.002) needs relatively large amounts of memory space in the Home 
Location Register (HLR) of the mobile radio network and in the 

20 mobile switching center (MSC-SGSN) and generates a high load during 
copying of conditions relating to the transfer of position data of 
the user to a requester from the HLR to the switching center 
currently being visited by the user (visited MSC/SGSN) . One of the 
reasons why the copying of the conditions is required is 

25 becausechecking of the conditions is undertaken in the switching 

center during a request for the position of a mobile radio terminal. 
The entire checking of the LCS user privacy settings relates here 
only to the LCS client ID of the requesting LCS client from whom the 
position request is sent via the GMLC to the switching center. 
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Further information about the type of the requesting service is not 
taken into consideration in 3GPP Release 4, and just as little 
attention is given to the identity of the requester (Requester ID) 
and conditions associated with it as well as further test conditions 
5 such as keywords etc . 

These additional conditions (additional attributes) relating to the 
transfer of position data of a user to a requester and the 
conditions in accordance with 3GPP Release 4, such as Client ID (LCS 
privacy data) are to be stored so that any number of additional 
10 attributes are possible without the memory space requirement in the 
HLR being further increased. 

A further restriction on the LCS privacy specified in accordance 
with 3GPP Release 4 is that in the case of national or international 
roaming (the mobile radio subscriber is not in his home network and 

15 is using a location dependent service in the visited a mobile radio 
network) the use of the LCS privacy function in the visited 
switching center MSC/SGSN in which the mobile radio subscriber is 
currently registered is only possible to a restricted extent because 
the local LCS Client IDs are possibly not known in the HLR and are 

20 not correspondingly entered by the mobile radio subscriber in his 
LCS privacy data. 

The approach currently evaluated, in accordance with Figure 2 
(Configuration 1) of storing the additional attributes in a separate 
LCS central privacy location, accessing this data of the LCS central 
25 privacy location from a GMLC and checking the LCS privacy data in 

the GMLC resolves the problem of restricted memory space in the HLR 
but presents the following problems to be resolved: 
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The start or the execution of the Location Subscriber Privacy- 
function (LSPF) is required by 3GPP to be at the switching center 
MSC/SGSN but is shifted by configuration 1 to the GMLC or into the 
LCS central privacy location. 
5 The incorporation of the classification of the LCS position request 
or the separation of the LCS privacy into call /session-related and 
call/session-unrelated classes in the test process required in 
accordance with 3GPP is not possible or only possible with 
considerable effort with Configuration 1 in accordance with Figure 

10 2. The notification of the current position determination or the 
demand for the permissibility of a position determination for the 
mobile subscriber involved, as required in 3GPP Release 4, is not 
possible with the configuration in accordance with Figure 2 or is 
only possible with increased effort. 

15 Each GMLC of any mobile radio network which is connected directly or 
indirectly to the mobile radio network in which the mobile switching 
center currently visited by the mobile subscriber is located, can 
initiate a position request for this mobile subscriber. If the test 
condition is applied and the result is evaluated in the GMLC, this 

20 requires a high level of trustworthiness of this GMLC. 

A further use of the user interface of the mobile and terminal user 
based on Subscriber Controlled Input (SCI) to change his settings of 
the LCS privacy data in the HLR is not possible for changing his 
settings of the LCS privacy data in the LCS central privacy location 

25 or is only possible with increased effort. 

In the case of national or international roaming (the Mobile 
subscriber is not in his home network and is using a location-based 
service in the visited mobile radio network) it is only possible to 
use the test condition and to evaluate the result in the GMLC or in 
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the LCS central privacy location by using the data which is stored 
in the LCS central privacy location in his home mobile radio network 
with increased effort. 

If a number of GMLC and/or a number of LCS . central privacy locations 
5 are used the assignment is unclear as to which GMLC is to access 
which LCS central privacy location. 

There are the following problems which already exist but are not 
resolved by a configuration in accordance with Figure 2 : 

Changes to the test conditions and the function for using the test 
10 conditions are associated with very high administrative effort for 
the network operator or are impossible if the LCS central privacy 
location and the network element in which the function for using the 
test conditions is executed are not collocated and/or cannot be 
synchronously administered. 

15 3GPP Release 4 only specifies a LCS privacy on the basis of the LCS 
Client IDs. In the case of national or international roaming - the 
mobile subscriber is not in his home network and is using a 
location-based service in the visited mobile radio network) it is 
only possible to use the test condition and to evaluate the result 

20 in the MSC/SGSN in which the mobile subscriber is currently 

registered to a restricted extent, because the local LCS client IDs 
must have been known in the LCS central privacy location of the 
mobile subscriber or must have been correspondingly entered by the 
mobile subscriber in his LCS privacy data 
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The object of the invention is to allow an efficient privacy 
request. The object is achieved by the objects of the Independent 
claims . 

In accordance with the invention the function for using the test 
5 conditions can lie in an LCS central privacy location where the 
associated test conditions or the LCS privacy data in accordance 
with 3GPP Release 4 with additional attributes (including for 
example the IN services type, the initiator, time dependencies or 
others) are stored. The LCS central privacy location administers 
10 items such as subscriber data records of mobile users of the home 
mobile radio network in which it is located. In the HLR the address 
of the LCS central privacy location responsible for the HLR and/or a 
mobile subscriber Identity are stored. 

When a mobile subscriber registers with a switching center the 
15 address of the LCS central privacy location stored in the HLR is 
preferably copied into the visited switching center. The position 
request can be classified into an LCS privacy class (Call-Session 
Related Class, Call-Session Unrelated Class...) in the switching 
center. The switching center usefully transfers to the LCS central 
20 privacy location the classification of the position request. Input 
Parameters for the Test conditions can be transferred from the 
position data requesting location (GMLC) to the switching center and 
these can be forwarded by the switching center - possibly together 
with further input parameters available in the switching center - to 
25 the LCS central privacy location. The use of the test conditions in 
the LCS central privacy location can be initiated by the switching 
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center on the basis of a direct or an indirect position request. For 
initiation of the use of the test conditions the switching center 
usefully transfers the input parameters of the test conditions to 
the LCS central privacy location. 
5 The additional attributes held in the LCS central privacy location 
make it possible to use LCS as well in the case of national or 
international roaming without the local LCS client IDs being known 
in the HLR or being entered correspondingly by the mobile subscriber 
in his LCS privacy data. The LCS central privacy location can be 

10 subdivided into a number of individual network elements. The 

assignment of which LCS central privacy location is responsible for 
which mobile subscriber is made by storing at the address of the LCS 
central privacy location in the HLR of the mobile radio subscriber 
or by a similar suitable method. The LCS central privacy location 

15 can be implemented at the SCP. A further use of the user interface 
of the mobile terminal user based on Subscriber Controlled Input 
(SCI) to change his settings of the LCS privacy data in the LCS 
central privacy location is made possible through an interface 
between the switching center and the HLR and between the HLR and the 

20 LCS central privacy location. If the LCS central privacy location is 
implemented at the SCP, this interface is already present. 

Further features and advantages of the invention are produced by the 
subsequent description of an exemplary embodiment with the enclosed 
drawings . 

25 The drawings show: 

Fig. 1 an LCS privacy check in accordance with 3GPP R4, 

Fig. 2 a variation of the 3GPP R4 solution and 

Fig. 3 a schematic diagram of a variation in accordance with the 
invention of this LCS privacy check. 
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In Fig. 1 a request 1 is sent from an LCS application 11 to a 
position data request acceptance location (GMLC) 12 which forwards 
this request for position data in step 2 to a switching center 
(SGSN/MSC etc.) 14 currently being visited by a mobile subscriber 
5 (MS) 13. The switching center SGSN/MSC 14 has stored (e.g. at 

regular intervals) in a step 0 specifications downloaded from an HLR 
about mobile terminal users (LCS privacy data 18) which tell it 
whether to verify with the mobile subscriber terminal 13 before 
transferring* the position of the mobile subscriber terminal to the 
10 requester 11. 

Before the privacy data 18 is checked the position data request 2 is 
classified 19 in the switching center (MSC/SGSN) 14. For Value Added 
Services various LCS privacy classes are provided, namely the call 
session-related class and the call session-unrelated class. The 

15 result of the classification determines which data of the privacy 

data 18 is taken into account. If the privacy checking 20 prescribes 
a verification of this type, in step 3 the switching center 14 asks 
the mobile terminal 13 whether the user of the mobile terminal 13 
would like to grant his permission to allow the requester 11 to 

20 determine the position of his mobile terminal. This mobile terminal 
can either give an answer 4 to this request from the switching 
center 14 or under some circumstances cannot give an answer, if the 
mobile terminal is not in use for example, is switched off or is 
located in a radio coverage gap. If a transfer of the position of 

25 the mobile terminal to the requester 11 is basically allowed, is 

allowed with notification (step 3) or if an alternative to this is 
to allow it after agreement 4 has been obtained and agreement is 
available or if a alternatively it is specified that if no rejection 
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of the agreement arrives the position is transferred, a transfer of 
the position of from the switching center 14 to the requester 11 can 
take place. The switching center 14 requests in step 5 from a RAN of 
a 3G network or a BSS of a 2G networks etc. the position of the 
5 mobile radio terminal 13 (for example as a result of the cell 
identity of the radio cell currently being used by the mobile 
terminal 13) and in step 6 obtains the current mobile radio terminal 
position in return. If the position is to be transferred to the 
requester 11, the switching center 14 transfers the data 

10 representing the position to the position data acceptance location 
GMLC 12 in step 7 which forwards this data without further 
conditions in step 8 to the requester 11 (if necessary specifying at 
the age of the position data provided the age has been determined by 
the position data determining location RAN/BSS 15 or the switching 

15 center 14 ) . 

Figure 3 shows a configuration in accordance with the invention to 
improve the LCS privacy request: 

The upwards compatibility of a mobile radio network in accordance 
with 3GPP Release 4 Standard to a mobile radio network with a 
20 configuration in accordance with the invention is possible. 

As also in the solution shown in Figure 1, a Home Location Register 
of the mobile radio network HLR 16 transfers on request or at 
regular intervals in a step 0 for a multiplicity of mobile 
subscribers to the switching center (e.g. currently being used by 
25 the mobile subscriber 13 ) SGSN/MSC 14 or (for regular transmission) 
to all switching centers a set of specifications (LCS data) 23=24 
which in Figure 3 however specify how an LCS central privacy 
location 2 6 which is responsible for the privacy of the mobile 
terminal user 13 is to be contacted by stored verification 
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specifications 24 (relating to a plurality of mobile terminal user 
identities, assigned to these by the identity of the mobile terminal 

13 or of the mobile subscriber identity module of the mobile 
terminal 13) - for example the LCS data 24 includes an address of 

5 the LCS central privacy location. The fact that the privacy data is 
no longer stored in the HLR but in the LCS central privacy location 
(database server 26) allows the network load between HLR 16 and 
switching center MSC/SGSN 14 and the memory requirement in the HLR 
to be significantly reduced. 

10 The variation of the execution sequence discussed for Figure 1 in 
accordance with the invention can thus be as follows: 
In step 0 LCS data 24 which contains address information of the LCS 
central privacy location responsible for the mobile station 13 in 
each case is transferred (on request or at regular intervals) from 

15 the Home Location Register HLR 16 to the switching center SGSN/MSC 

14 for each mobile station 13 registered there. 

There is a transfer 1 of an LCS service request from an LCS customer 
(requester 11) to the position data requesting location GMLC 12 and 
transfer of the required and optional data relating to the request 
'20 (Client ID, IMSI/MSISDN, QoS, requester, ...) 

Subsequently, as in the method above, the request 2 is classified in 
exchange 14. By contrast with the above method however the LCS 
privacy is not checked in the switching center. After the 
classification the privacy request 2a is sent to the LCS central 
25 privacy location 26. The address of the LCS central privacy location 
26 is taken from the LCS data 24. 
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In step 2a the switching center 14 sends a request 2a, which 
contains test conditions, such as a class of the request 
(Call/Session Related, Call/Session Unrelated. . . ) and additional 
test parameters received in the request 2, for example LCS client 
5 ID, initiator and LCS client type, for checking the privacy 

functions of the mobile radio terminal user 13, to the LCS central 
privacy location 26 for which the address is specified by the LCS 
data 24, or to a predefined LCS central privacy location 26. 

In step 2b the LCS central privacy location 2 6 executes the check on 
10 the LCS privacy 20. The LCS privacy 20 can be checked in accordance 
with 3GPP R4 on the basis of the classification received and the 
Client ID of LCS application 11 received or above and beyond this, 
can use additional attributes 21, such as for example take account 
of the received LCS client type and/or initiator, and/or possibly 
15 additional locally-available test parameters - for example the 
current time (26) . 

These steps are followed by steps 3 through 8 already specified for 
Figure 1 (verification 3,4 with mobile terminal 13, position 
determination 5,6, and if allowed for the mobile station 13, 

20 position data transfer 7,8). 

As an alternative to the method specified above the LCS central 
privacy location 26 can be implemented at the SCP so that a user 
interface implemented by Subscriber Controlled Input (SCI) which can 
modify the LCS privacy data 18 in accordance with 3GPP R4 in the 

25 HLR, can also continue to be used unchanged for the LCS central 
privacy location 2 6 at the SCP or can be expanded. 

As a further alternative to the method specified above the LCS 
central privacy location at 2 6 can be subdivided into a database 
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which contains the LCS privacy data 18 and the additional attributes 
21 and into an additional unit which executes the LCS privacy check 
20. 

As a further alternative to the method specified above the LCS 
5 privacy data, as described for Figure 3 can be stored in the central 
privacy location 26, but to allow upwards compatibility with Home 
Location Registers HLR 16 which do not (yet support the inventive 
improvement of the LCS privacy, LCS privacy data 18 stored in the 
privacy central location 26 can be transferred and/or synchronized 

10 on request or at intervals in a suitable form, possibly in 

accordance with 3GPP Release 4 and by means of a suitable procedures 
such as for example an interface between central privacy location 2 6 
and Home Location Register 16, so that the Home Location Register 
HLR 16 can transfer the LCS privacy data in a step 0 as described in 

15 Figure 1, to a switching center 14. The upwards -compatible component 
of the LCS privacy check of the central privacy location at 2 6 is 
performed in accordance with the privacy classification 19 in the 
switching center 14 as described in Figure 1 and the result is 
transferred as an additional input parameter or to the central 

20 privacy location 26 in step 2a. 

As a further alternative to the method specified above the LCS 
privacy data 18 can remain in the Home Location Register 16, as 
described in Figure 1 and only the additional attributes are stored 
in the central privacy location 26. The address of the central 
25 privacy location 26 is to be stored in the HLR. The combination of 

the results of the LCS privacy data check in the switching center 14 
and the check on the additional attributes in the central privacy 
location 2 6 can be undertaken in the switching center 14 or in the 
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central privacy location 26 and can depend on whether the mobile 
terminal user is located in his home mobile radio network or is 
using another network within or outside the home country. 



